QUOTE(JinXXX @ Jun 13 2016, 08:55 PM)
care to share the solution ?
Basically TM routes a /29 to customer so in my case it's
202.188.123.128/29 with 6 hosts IP. the "5 Fixed IP" TM advertise because 1st IP will always be assigned to the PPPoE client which is the router.
In our case, all 6 IPs are actually usable.
1 - Standard configuration
http://www.mikrotik.com.my/setup-for-unifi/2 - You do not want everything to be NATed since there are 5 more usable IPs
Create additional bridge:
bridge-WANbridge-LAN
3 - Configure Bridge Port
I have ether2 assigned as public interface so the CheckPoint firewall will connect to ether2 w/ public IP. ether3/4/5 will be NATed to 202.188.123.129 IP (Or any of the additional IPs if it's assigned WAN interface).
CODE
# INTERFACE BRIDGE PRIORITY PATH-COST HORIZON
0 ether3-NAT bridge-LAN 0x80 10 none
3 ether2-Public bridge-WAN 0x80 10 none
4 - Now, depending on how do you want to assign the interface, this is my sample:
CODE
# NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU
0 R ether1-gateway ether 1500 1598 4074
1 S ether2-Public ether 1500 1598 4074
2 RS ether3-NAT ether 1500 1598 4074
3 S ether4 ether 1500 1598 4074
4 S ether5 ether 1500 1598 4074
5 - Configure IP
Default bridge-LAN (preset according to the guide)
assign the /29 network to bridge-WAN. Make sure the 1st IP is the PPPoE IP on the bridge.
CODE
0 192.168.88.1/24 192.168.11.0 bridge-LAN
1 [B]202.188.123.129/29[/B] 202.188.123.128 [B]bridge-WAN[/B]
2 D [B]202.188.123.129[/B]/32 1.1.1.1 [B]Unifi-Biz[/B]
Now, you should be able to use Public IP on ether2. Just assign more ports to bridge-WAN if needed.
Summary
CODE
|PPPoE Client - UniBiz (Assigned 1st IP)
|--- Bridge-WAN
|--- Assign IP (1st-IP/29)
|--- Bridge Port (ether2)
|--- Bridge-LAN
|--- Assign IP (Local NATed network)
|--- Bridge Port (ether3) - Master
|--- Interface Port (ether4) - Slave -> Master(ether3)
|--- Interface Port (ether5) - Slave -> Master(ether3)
I *think* this is correct as it works. Hopefully it gives you some idea on how to configure the 5 fixed IPs.